diff --git a/app/Filament/Resources/RoleTemplates/Pages/CreateRoleTemplate.php b/app/Filament/Resources/RoleTemplates/Pages/CreateRoleTemplate.php
new file mode 100644
index 0000000..7e1e187
--- /dev/null
+++ b/app/Filament/Resources/RoleTemplates/Pages/CreateRoleTemplate.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\Resources\RoleTemplates\Pages;
+
+use App\Filament\Resources\RoleTemplates\RoleTemplateResource;
+use Filament\Resources\Pages\CreateRecord;
+
+class CreateRoleTemplate extends CreateRecord
+{
+    protected static string $resource = RoleTemplateResource::class;
+}
diff --git a/app/Filament/Resources/RoleTemplates/Pages/EditRoleTemplate.php b/app/Filament/Resources/RoleTemplates/Pages/EditRoleTemplate.php
new file mode 100644
index 0000000..29e1891
--- /dev/null
+++ b/app/Filament/Resources/RoleTemplates/Pages/EditRoleTemplate.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Filament\Resources\RoleTemplates\Pages;
+
+use App\Filament\Resources\RoleTemplates\RoleTemplateResource;
+use Filament\Actions\DeleteAction;
+use Filament\Resources\Pages\EditRecord;
+
+class EditRoleTemplate extends EditRecord
+{
+    protected static string $resource = RoleTemplateResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            DeleteAction::make(),
+        ];
+    }
+}
diff --git a/app/Filament/Resources/RoleTemplates/Pages/ListRoleTemplates.php b/app/Filament/Resources/RoleTemplates/Pages/ListRoleTemplates.php
new file mode 100644
index 0000000..0027980
--- /dev/null
+++ b/app/Filament/Resources/RoleTemplates/Pages/ListRoleTemplates.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Filament\Resources\RoleTemplates\Pages;
+
+use App\Filament\Resources\RoleTemplates\RoleTemplateResource;
+use Filament\Actions\CreateAction;
+use Filament\Resources\Pages\ListRecords;
+
+class ListRoleTemplates extends ListRecords
+{
+    protected static string $resource = RoleTemplateResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            CreateAction::make(),
+        ];
+    }
+}
diff --git a/app/Filament/Resources/RoleTemplates/RoleTemplateResource.php b/app/Filament/Resources/RoleTemplates/RoleTemplateResource.php
new file mode 100644
index 0000000..33922ac
--- /dev/null
+++ b/app/Filament/Resources/RoleTemplates/RoleTemplateResource.php
@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Filament\Resources\RoleTemplates;
+
+use App\Filament\Resources\RoleTemplates\Pages;
+use App\Models\RoleTemplate;
+use App\Enums\NavigationGroup;
+use Filament\Schemas\Schema;
+use Filament\Resources\Resource;
+use Filament\Tables\Table;
+use App\Filament\Resources\RoleTemplates\Schemas\RoleTemplateForm;
+use App\Filament\Resources\RoleTemplates\Tables\RoleTemplatesTable;
+
+class RoleTemplateResource extends Resource
+{
+    protected static ?string $model = RoleTemplate::class;
+    protected static string | \BackedEnum | null $navigationIcon = 'heroicon-o-shield-check';
+    protected static string | \UnitEnum | null $navigationGroup = NavigationGroup::SETTING->value;
+    protected static ?int $navigationSort = 90;
+
+    protected static ?string $modelLabel = 'Mẫu phân quyền';
+    protected static ?string $pluralModelLabel = 'Mẫu phân quyền';
+
+    public static function form(Schema $schema): Schema
+    {
+        return RoleTemplateForm::configure($schema);
+    }
+
+    public static function table(Table $table): Table
+    {
+        return RoleTemplatesTable::configure($table);
+    }
+
+    public static function getPages(): array
+    {
+        return [
+            'index' => Pages\ListRoleTemplates::route('/'),
+            'create' => Pages\CreateRoleTemplate::route('/create'),
+            'edit' => Pages\EditRoleTemplate::route('/{record}/edit'),
+        ];
+    }
+}
diff --git a/app/Filament/Resources/RoleTemplates/Schemas/RoleTemplateForm.php b/app/Filament/Resources/RoleTemplates/Schemas/RoleTemplateForm.php
new file mode 100644
index 0000000..1970c04
--- /dev/null
+++ b/app/Filament/Resources/RoleTemplates/Schemas/RoleTemplateForm.php
@@ -0,0 +1,66 @@
+<?php
+
+namespace App\Filament\Resources\RoleTemplates\Schemas;
+
+use App\Models\PermissionModule;
+use Filament\Forms\Components\CheckboxList;
+use Filament\Forms\Components\TextInput;
+use Filament\Forms\Components\Toggle;
+use Filament\Schemas\Components\Section;
+use Filament\Schemas\Components\Grid;
+use Filament\Schemas\Schema;
+
+class RoleTemplateForm
+{
+    public static function configure(Schema $schema): Schema
+    {
+        $modules = PermissionModule::orderBy('label')->get();
+
+        $permissionComponents = [];
+        foreach ($modules as $module) {
+            $options = [];
+            foreach ($module->actions as $action) {
+                $label = match ($action) {
+                    'view' => 'Xem',
+                    'create' => 'Thêm',
+                    'update' => 'Sửa',
+                    'delete' => 'Xóa',
+                    'restore' => 'Khôi phục',
+                    'forceDelete' => 'Xóa vĩnh viễn',
+                    'export' => 'Xuất Excel',
+                    default => $action,
+                };
+                $options[$action] = $label;
+            }
+
+            $permissionComponents[] = CheckboxList::make("permissions.{$module->module}")
+                ->label($module->label)
+                ->options($options)
+                ->columns(4)
+                ->columnSpanFull();
+        }
+
+        return $schema
+            ->components([
+                Grid::make(2)
+                    ->schema([
+                        Section::make('Thông tin nhóm')
+                            ->columnSpan(1)
+                            ->schema([
+                                TextInput::make('name')
+                                    ->label('Tên nhóm')
+                                    ->required(),
+                                TextInput::make('description')
+                                    ->label('Mô tả'),
+                                Toggle::make('is_active')
+                                    ->label('Kích hoạt')
+                                    ->default(true),
+                            ]),
+
+                        Section::make('Phân quyền theo module')
+                            ->columnSpan(1)
+                            ->schema($permissionComponents),
+                    ]),
+            ]);
+    }
+}
diff --git a/app/Filament/Resources/RoleTemplates/Tables/RoleTemplatesTable.php b/app/Filament/Resources/RoleTemplates/Tables/RoleTemplatesTable.php
new file mode 100644
index 0000000..ecbfddb
--- /dev/null
+++ b/app/Filament/Resources/RoleTemplates/Tables/RoleTemplatesTable.php
@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Filament\Resources\RoleTemplates\Tables;
+
+use Filament\Tables;
+use Filament\Tables\Columns\IconColumn;
+use Filament\Tables\Columns\TextColumn;
+use Filament\Tables\Table;
+
+class RoleTemplatesTable
+{
+    public static function configure(Table $table): Table
+    {
+        return $table
+            ->columns([
+                TextColumn::make('name')
+                    ->label('Tên nhóm')
+                    ->searchable()
+                    ->sortable(),
+
+                TextColumn::make('description')
+                    ->label('Mô tả')
+                    ->limit(50)
+                    ->toggleable(),
+
+                IconColumn::make('is_active')
+                    ->label('Kích hoạt')
+                    ->boolean()
+                    ->alignCenter(),
+
+                TextColumn::make('users_count')
+                    ->label('Số user')
+                    ->counts('users')
+                    ->alignCenter(),
+
+                TextColumn::make('created_at')
+                    ->label('Ngày tạo')
+                    ->dateTime('d/m/Y')
+                    ->toggleable(isToggledHiddenByDefault: true),
+            ])
+            ->filters([
+                Tables\Filters\TernaryFilter::make('is_active')
+                    ->label('Trạng thái'),
+            ])
+            ->defaultSort('created_at', 'desc');
+    }
+}
diff --git a/app/Filament/Resources/Users/Pages/CreateUser.php b/app/Filament/Resources/Users/Pages/CreateUser.php
new file mode 100644
index 0000000..125b3ff
--- /dev/null
+++ b/app/Filament/Resources/Users/Pages/CreateUser.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\Resources\Users\Pages;
+
+use App\Filament\Resources\Users\UserResource;
+use Filament\Resources\Pages\CreateRecord;
+
+class CreateUser extends CreateRecord
+{
+    protected static string $resource = UserResource::class;
+}
diff --git a/app/Filament/Resources/Users/Pages/EditUser.php b/app/Filament/Resources/Users/Pages/EditUser.php
new file mode 100644
index 0000000..4c7c132
--- /dev/null
+++ b/app/Filament/Resources/Users/Pages/EditUser.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Filament\Resources\Users\Pages;
+
+use App\Filament\Resources\Users\UserResource;
+use Filament\Actions\DeleteAction;
+use Filament\Resources\Pages\EditRecord;
+
+class EditUser extends EditRecord
+{
+    protected static string $resource = UserResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            DeleteAction::make(),
+        ];
+    }
+}
diff --git a/app/Filament/Resources/Users/Pages/ListUsers.php b/app/Filament/Resources/Users/Pages/ListUsers.php
new file mode 100644
index 0000000..6f0e73d
--- /dev/null
+++ b/app/Filament/Resources/Users/Pages/ListUsers.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Filament\Resources\Users\Pages;
+
+use App\Filament\Resources\Users\UserResource;
+use Filament\Actions\CreateAction;
+use Filament\Resources\Pages\ListRecords;
+
+class ListUsers extends ListRecords
+{
+    protected static string $resource = UserResource::class;
+
+    protected function getHeaderActions(): array
+    {
+        return [
+            CreateAction::make(),
+        ];
+    }
+}
diff --git a/app/Filament/Resources/Users/Schemas/UserForm.php b/app/Filament/Resources/Users/Schemas/UserForm.php
new file mode 100644
index 0000000..64755fb
--- /dev/null
+++ b/app/Filament/Resources/Users/Schemas/UserForm.php
@@ -0,0 +1,61 @@
+<?php
+
+namespace App\Filament\Resources\Users\Schemas;
+
+use App\Models\RoleTemplate;
+use Filament\Forms\Components\Select;
+use Filament\Forms\Components\TagsInput;
+use Filament\Forms\Components\TextInput;
+use Filament\Schemas\Components\Section;
+use Filament\Schemas\Components\Grid;
+use Filament\Schemas\Schema;
+
+class UserForm
+{
+    public static function configure(Schema $schema): Schema
+    {
+        return $schema
+            ->components([
+                Grid::make(2)
+                    ->schema([
+                        Section::make('Thông tin tài khoản')
+                            ->columnSpan(1)
+                            ->schema([
+                                TextInput::make('name')
+                                    ->label('Họ tên')
+                                    ->required(),
+                                TextInput::make('email')
+                                    ->label('Email')
+                                    ->email()
+                                    ->required()
+                                    ->unique(ignoreRecord: true),
+                            ]),
+
+                        Section::make('Phân quyền')
+                            ->columnSpan(1)
+                            ->schema([
+                                Select::make('role_template_id')
+                                    ->label('Nhóm quyền (Mẫu)')
+                                    ->relationship('roleTemplate', 'name')
+                                    ->searchable()
+                                    ->preload()
+                                    ->placeholder('Không theo mẫu nào'),
+
+                                TagsInput::make('extra_permissions')
+                                    ->label('Thêm quyền (vượt cấp)')
+                                    ->placeholder('ví dụ: contracts.export, payments.delete')
+                                    ->helperText('Nhập quyền muốn thêm cho user này, bất chấp mẫu nhóm')
+                                    ->separator(',')
+                                    ->splitKeys([',', 'Enter']),
+
+                                TagsInput::make('excluded_permissions')
+                                    ->label('Bớt quyền (hạn chế)')
+                                    ->placeholder('ví dụ: contracts.delete')
+                                    ->helperText('Nhập quyền muốn tắt cho user này, bất chấp mẫu nhóm')
+                                    ->separator(',')
+                                    ->splitKeys([',', 'Enter']),
+                            ]),
+                    ]),
+            ]);
+    }
+}
diff --git a/app/Filament/Resources/Users/Tables/UsersTable.php b/app/Filament/Resources/Users/Tables/UsersTable.php
new file mode 100644
index 0000000..19d58bd
--- /dev/null
+++ b/app/Filament/Resources/Users/Tables/UsersTable.php
@@ -0,0 +1,43 @@
+<?php
+
+namespace App\Filament\Resources\Users\Tables;
+
+use Filament\Tables;
+use Filament\Tables\Columns\TextColumn;
+use Filament\Tables\Table;
+
+class UsersTable
+{
+    public static function configure(Table $table): Table
+    {
+        return $table
+            ->columns([
+                TextColumn::make('name')
+                    ->label('Họ tên')
+                    ->searchable()
+                    ->sortable(),
+
+                TextColumn::make('email')
+                    ->label('Email')
+                    ->searchable()
+                    ->sortable(),
+
+                TextColumn::make('roleTemplate.name')
+                    ->label('Nhóm quyền')
+                    ->placeholder('Không có')
+                    ->badge()
+                    ->color('primary'),
+
+                TextColumn::make('created_at')
+                    ->label('Ngày tạo')
+                    ->dateTime('d/m/Y')
+                    ->toggleable(isToggledHiddenByDefault: true),
+            ])
+            ->filters([
+                Tables\Filters\SelectFilter::make('role_template_id')
+                    ->label('Nhóm quyền')
+                    ->relationship('roleTemplate', 'name'),
+            ])
+            ->defaultSort('created_at', 'desc');
+    }
+}
diff --git a/app/Filament/Resources/Users/UserResource.php b/app/Filament/Resources/Users/UserResource.php
new file mode 100644
index 0000000..6b52022
--- /dev/null
+++ b/app/Filament/Resources/Users/UserResource.php
@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Filament\Resources\Users;
+
+use App\Filament\Resources\Users\Pages;
+use App\Models\User;
+use App\Enums\NavigationGroup;
+use Filament\Schemas\Schema;
+use Filament\Resources\Resource;
+use Filament\Tables\Table;
+use App\Filament\Resources\Users\Schemas\UserForm;
+use App\Filament\Resources\Users\Tables\UsersTable;
+
+class UserResource extends Resource
+{
+    protected static ?string $model = User::class;
+    protected static string | \BackedEnum | null $navigationIcon = 'heroicon-o-user-group';
+    protected static string | \UnitEnum | null $navigationGroup = NavigationGroup::SETTING->value;
+    protected static ?int $navigationSort = 100;
+
+    protected static ?string $modelLabel = 'Ngườ dùng';
+    protected static ?string $pluralModelLabel = 'Ngườ dùng';
+
+    public static function form(Schema $schema): Schema
+    {
+        return UserForm::configure($schema);
+    }
+
+    public static function table(Table $table): Table
+    {
+        return UsersTable::configure($table);
+    }
+
+    public static function getPages(): array
+    {
+        return [
+            'index' => Pages\ListUsers::route('/'),
+            'create' => Pages\CreateUser::route('/create'),
+            'edit' => Pages\EditUser::route('/{record}/edit'),
+        ];
+    }
+}